PatchTheCVE: newphoria corporationhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2015-7772: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13https://patchthecve.com/cve/CVE-2015-7772.htmlhttps://patchthecve.com/cve/CVE-2015-7772.htmlWed, 17 Jun 2026 00:33:06 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different vulnerCVE-2015-7771: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13https://patchthecve.com/cve/CVE-2015-7771.htmlhttps://patchthecve.com/cve/CVE-2015-7771.htmlWed, 17 Jun 2026 00:33:06 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-20CVE-2015-5637: The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection https://patchthecve.com/cve/CVE-2015-5637.htmlhttps://patchthecve.com/cve/CVE-2015-5637.htmlWed, 17 Jun 2026 00:29:29 +0000MEDIUM 6.8: The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.CVE-2015-5636: The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass ahttps://patchthecve.com/cve/CVE-2015-5636.htmlhttps://patchthecve.com/cve/CVE-2015-5636.htmlWed, 17 Jun 2026 00:29:29 +0000MEDIUM 6.8: The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.CVE-2015-5635: The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a https://patchthecve.com/cve/CVE-2015-5635.htmlhttps://patchthecve.com/cve/CVE-2015-5635.htmlWed, 17 Jun 2026 00:29:29 +0000MEDIUM 6.8: The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.CVE-2015-5634: The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to byhttps://patchthecve.com/cve/CVE-2015-5634.htmlhttps://patchthecve.com/cve/CVE-2015-5634.htmlWed, 17 Jun 2026 00:29:29 +0000MEDIUM 6.8: The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.CVE-2015-5633: The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whttps://patchthecve.com/cve/CVE-2015-5633.htmlhttps://patchthecve.com/cve/CVE-2015-5633.htmlWed, 17 Jun 2026 00:29:29 +0000MEDIUM 6.8: The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.CVE-2015-5632: The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allhttps://patchthecve.com/cve/CVE-2015-5632.htmlhttps://patchthecve.com/cve/CVE-2015-5632.htmlWed, 17 Jun 2026 00:29:29 +0000MEDIUM 6.8: The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.